Curaçao Gaming Authority Data Breach Reveals Extensive Licensing Records

The Curaçao Gaming Authority experienced a significant data breach that exposed tens of thousands of confidential documents, and these materials included license applications along with passports, tax records, and ownership details tied to hundreds of online gambling companies operating under licenses issued on the island. Investigative reporting conducted by Follow the Money through its Casino Secrets project, in collaboration with partner media outlets, identified around 767 individuals connected to 646 licensed entities, and this analysis highlighted instances where regulators had granted or maintained licenses despite unresolved ownership questions or other red flags.

Observers note that the leaked materials surfaced publicly around September 17, 2026, and coverage from multiple outlets referenced the internal license applications and regulatory assessments contained within the files. The documents covered a wide range of entities, while the reporting process connected specific cases to operators associated with platforms such as Stake and 1xBet, and these connections prompted further examination of licensing decisions made by the authority.

Scope of Exposed Materials

Researchers who reviewed the leaked files found that the breach encompassed comprehensive records spanning multiple years of regulatory activity, and these records contained detailed passport copies, tax documentation, and corporate ownership structures for companies seeking or holding Curaçao licenses. The volume of materials reached tens of thousands of individual documents, which created challenges for investigators attempting to catalog every item, yet patterns emerged quickly once analysts began cross-referencing names and entities.

Those who examined the data discovered that approximately 767 individuals appeared across the files in connection with 646 separate licensed operations, and this scale indicated the breadth of the regulatory oversight handled by the authority. Several files showed situations where ownership details remained unclear at the time of license approval, yet the process continued without resolution of those questions, and similar patterns appeared in cases involving potential compliance concerns.

Investigative Findings on Licensing Practices

Follow the Money and its partner outlets traced specific license histories through the exposed documents, and their work revealed multiple examples where regulators proceeded with approvals even though ownership questions had not been fully addressed. The reporting identified links between certain licensed entities and operators behind major platforms, which included references to Stake and 1xBet, and these connections drew attention to how background checks and ownership verifications operated in practice.

Analysts noted that some files contained internal assessments highlighting unresolved issues, yet licenses remained active or received renewal, and this pattern suggested gaps in the verification procedures used by the authority. The leaked materials also included correspondence and supporting documentation that accompanied application processes, which allowed investigators to reconstruct timelines for individual companies and their principals.

Implications for Transparency and Compliance

The exposure of these records has prompted discussions about the level of transparency maintained by the Curaçao Gaming Authority, while concerns about potential money laundering risks surfaced in connection with certain ownership structures identified in the files. Data from the breach showed that some entities operated with ownership details that raised questions during the licensing review, and these situations persisted across multiple renewals according to the internal notes.

Those who studied the documents found references to companies where tax records and passport information appeared alongside corporate filings that left ownership chains incomplete, and this combination of materials provided a detailed view into how applications moved through the regulatory system. The reporting by Follow the Money connected these findings to broader questions about oversight mechanisms, and the analysis covered hundreds of entities without attempting to draw conclusions beyond what the documents themselves indicated.

Context of the September 2026 Disclosure

Media outlets began publishing details from the breach in September 2026, and the initial reports focused on the volume of documents along with the number of individuals and entities involved. Coverage referenced the internal nature of the files, which included license applications and regulatory assessments rather than any formal published report, and this distinction helped frame the type of information that had become public.

Investigators who accessed the materials worked through the large collection methodically, and they cross-checked names against public records to verify connections between individuals and the 646 licensed operations. The process uncovered cases where red flags had been noted internally yet did not prevent license issuance or continuation, which added context to the regulatory environment on the island.

Conclusion

The data breach at the Curaçao Gaming Authority stands as a substantial release of licensing records, adn the investigative work by Follow the Money along with partner outlets has documented the scale of exposed materials including applications, passports, and ownership details. The findings cover 767 individuals linked to 646 entities, while highlighting specific instances of unresolved questions during teh licensing process, and these details remain available through the referenced coverage from September 2026. Observers continue to review the implications for regulatory transparency and compliance standards based on the information contained in the leaked files.